Security: CSF Security Release
Multiple vulnerabilities were found in the ConfigServer Firewall plugin.
Varsayılan Güncelleme Komutu
cd /usr/src && rm -f csf.tgz && wget https://download.configserver.com/csf.tgz && tar -xzf csf.tgz && cd csf && sh install.sh && csf -rDüzeltme Komutları
EL7 (CentOS/CloudLinux 7)
sudo yum updateEL8+ (AlmaLinux/CloudLinux/Rocky)
sudo dnf updateSharedLicense lisansı altında bunun anlamı
Your SharedLicense license itself is not affected — this is a change in cPanel & WHM software, not in licensing. Reinstall CSF from the latest ConfigServer package (csf.tgz) and run csf -r. Licenses keep working through updates; nothing needs re-issuing or re-activating.
Situation
Multiple vulnerabilities were found in the ConfigServer Firewall plugin.
Affected Product Versions
| Product | Affected Versions | Patched Versions |
|---|---|---|
| CSF | 16.20-1 and earlier | 16.30-1 |
Impact
Exploiting the vulnerabilities could allow an attacker to gain root access.
Call to action
Update to the latest version of the ConfigServer Firewall plugin:
CentOS 7/CloudLinux 7
# yum clean all
# /scripts/update-packages
AlmaLinux/CloudLinux 8/9/10
# dnf clean metadata
# /scripts/update-packages
Ubuntu
# apt update
# /scripts/update-packages
Mitigation
The best mitigation for this problem is to update.
Referanslar
Sisteminizi güvenlik açıkları açısından kontrol edin
Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.
Sisteminizi Kontrol Edin